$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: 0JJN8YZAkCtgWRlvfAeFnkNKqzw+ewCslLQzlXTA1IU= Subject key identifier: 2F:DA:AE:32:D5:D6:0F:FA:53:6D:79:EA:EE:51:97:CA:34:19:6F:12 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0C7C Signing time: Tue 28 Jul 2026 18:50:57 +0000 Manifest this update: Tue 28 Jul 2026 18:50:57 +0000 Manifest next update: Tue 04 Aug 2026 18:50:57 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: 8jQKAcLZl1HPdlMBAg27S4L9PXXV3RpcWwGjLgPCvmc=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Jul 28 18:50:57 2026 GMT Not After : Aug 4 18:50:57 2026 GMT Subject: CN=6a68fa11-1dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:5f:02:9e:ea:b6:35:29:de:68:1b:22:e1: c5:ef:6f:b4:b5:67:00:6e:71:2b:93:95:10:31:db: 52:85:05:60:82:73:35:eb:e2:25:03:6c:5f:71:00: ac:36:4c:bd:9d:a7:a7:8f:6d:34:09:8f:51:fa:8f: 2d:09:16:5a:31:31:54:b2:de:83:f0:e1:3f:61:e9: 01:1b:e8:ae:da:a9:04:31:5b:b0:79:39:d4:09:4d: 0e:d8:8c:6f:f4:48:29:ce:db:ee:97:10:85:d6:c9: ef:13:85:a2:6d:63:6e:54:b8:d5:ed:a4:dd:08:19: a3:7d:cc:80:39:97:7f:e9:6b:f8:ce:b2:22:9c:b0: 0d:9f:40:6a:8e:43:88:46:a0:6c:d5:59:08:02:9c: 79:92:66:4b:e4:da:ce:ef:64:ab:98:3f:c5:36:90: a2:2d:9d:02:03:53:a3:32:df:a9:be:e7:00:45:77: d5:35:8e:f2:e3:d4:af:e0:2c:1e:02:ac:95:28:9d: b1:25:c8:fc:59:e0:21:ee:32:c4:bf:6b:b0:6e:44: af:89:bb:93:ab:87:5b:26:26:de:f9:38:04:de:07: 4b:42:ec:5e:c7:12:20:4f:01:7d:d7:85:33:f5:bc: 57:cd:c1:77:a9:32:24:e3:ea:39:1d:c3:f6:04:d8: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:AE:32:D5:D6:0F:FA:53:6D:79:EA:EE:51:97:CA:34:19:6F:12 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:54:2c:c0:b6:e9:a8:4d:2e:4e:c0:17:79:43:15:c3:7f:97: ab:da:4d:39:65:6a:db:95:a3:bb:64:8b:6a:12:69:36:c1:d1: 21:df:86:08:ac:f4:70:53:08:a6:c7:e5:9f:59:10:54:49:bc: bd:40:0e:54:aa:39:38:45:c3:49:26:56:99:2b:60:fd:32:cc: 4c:84:b0:a4:df:d0:04:7d:d7:87:66:c1:03:8c:dd:16:a0:a2: b5:c3:f0:a0:d8:53:b7:f1:9a:49:b4:c7:89:cb:78:37:29:35: 14:32:fb:ba:c0:45:22:de:33:9d:db:07:de:6a:04:34:ed:81: e6:23:a4:bb:86:77:6a:2a:00:f9:60:8d:7d:fc:6d:c7:c2:5a: 1f:2c:3b:2b:96:17:ce:9d:b1:1b:6b:cd:20:18:99:aa:c6:94: 17:d9:0d:62:ac:6a:c0:b3:4d:fd:92:0f:f2:f4:b5:dd:05:2c: ae:c9:92:49:16:ad:de:42:a8:3b:94:6f:eb:40:e7:7f:ca:d5: 79:56:97:a0:b0:73:0d:46:84:e3:3e:e0:2e:97:57:79:37:28: 61:45:40:22:6d:43:83:31:16:96:92:57:48:c4:36:65:96:0d: b4:79:69:52:23:96:26:33:ab:e8:48:14:ad:76:6f:9c:86:e3: e2:3d:b1:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjYwNzI4MTg1MDU3WhcNMjYwODA0MTg1MDU3WjAYMRYwFAYD VQQDEw02YTY4ZmExMS0xZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7xfAp7qtjUp3mgbIuHF72+0tWcAbnErk5UQMdtShQVggnM16+IlA2xfcQCs Nky9naenj200CY9R+o8tCRZaMTFUst6D8OE/YekBG+iu2qkEMVuweTnUCU0O2Ixv 9EgpztvulxCF1snvE4WibWNuVLjV7aTdCBmjfcyAOZd/6Wv4zrIinLANn0BqjkOI RqBs1VkIApx5kmZL5NrO72SrmD/FNpCiLZ0CA1OjMt+pvucARXfVNY7y49Sv4Cwe AqyVKJ2xJcj8WeAh7jLEv2uwbkSvibuTq4dbJibe+TgE3gdLQuxexxIgTwF914Uz 9bxXzcF3qTIk4+o5HcP2BNiyhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/arjLV 1g/6U2156u5Rl8o0GW8SMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAolQswLbpqE0uTsAXeUMVw3+Xq9pNOWVq25Wju2SLahJpNsHRId+GCKz0cFMI psfln1kQVEm8vUAOVKo5OEXDSSZWmStg/TLMTISwpN/QBH3Xh2bBA4zdFqCitcPw oNhTt/GaSbTHict4Nyk1FDL7usBFIt4zndsH3moENO2B5iOku4Z3aioA+WCNffxt x8JaHyw7K5YXzp2xG2vNIBiZqsaUF9kNYqxqwLNN/ZIP8vS13QUsrsmSSRat3kKo O5Rv60Dnf8rVeVaXoLBzDUaE4z7gLpdXeTcoYUVAIm1DgzEWlpJXSMQ2ZZYNtHlp UiOWJjOr6EgUrXZvnIbj4j2xkw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:55:45 2026 by rpki-client